Re: Open Ports and Trojan Horses

[Hal Burgiss <hburgiss bellsouth net>]

On Tue, Feb 01, 2000 at 03:15:13PM -0500, Steve wrote:
> When I do a netstat -a I get a whole list of ports that are open on
> my box but some of them are not listed in /etc/services and accoring
> to a security doc one is used by netbus (12345) How do I check to
> see what ports are allocated to what services and if I do have
> netbus on my box how do I get rid of it?

Are you running portsentry by any chance?

 [hal feenix hal]$ sudo netstat -ap | grep 12345
 tcp      0      0 *:12345         *:*     LISTEN      556/portsentry 

If you are, some ports appear open because portsentry is lurking
there. Not to worry if that be the case.

-- 
Hal B
hburgiss bellsouth net
--
            Linux helps those who help themselves